CVE-2019-19449

f2fs: Heap out-of-bounds read in init_min_max_mtime()

References

Debian security tracker
cve.org
https://github.com/bobfuzzer/CVE/tree/master/CVE-2019-19449

Notes

 bwh> The loop in init_min_max_mtime() has not changed between
 bwh> 4.9 and 5.17-rc4, and there don't appear to be any checks
 bwh> that main_segments is exactly divisible by segs_per_sec,
 bwh> so all branches are affected.

Bugs

Status

Branch	Status
upstream	needed
6.18-upstream-stable
6.17-upstream-stable
6.12-upstream-stable
6.6-upstream-stable
6.1-upstream-stable	needed
5.10-upstream-stable	needed
4.9-upstream-stable	ignored "EOL"
3.16-upstream-stable	ignored "EOL"
sid	needed
6.12-trixie-security	needed
6.1-bookworm-security	needed
5.10-bullseye-security	needed
4.9-stretch-security	ignored "f2fs is not supportable"
3.16-jessie-security	ignored "EOL"